Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ap4VNiWFsEM1x-0__wl-2Hn0X3k.roa
File: ap4VNiWFsEM1x-0__wl-2Hn0X3k.roa (raw, json)
Hash identifier: HuHqfkm5ASgbgH0pp8nkPhafPvuAYeQcxjHwBYVYHAY=
Subject key identifier: 6A:9E:15:36:25:85:B0:43:35:C7:ED:3F:FF:09:7E:D8:79:F4:5F:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 202E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ap4VNiWFsEM1x-0__wl-2Hn0X3k.roa
Signing time: Thu 19 Jun 2025 03:36:46 +0000
ROA not before: Thu 19 Jun 2025 03:36:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8238 (0x202e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 03:36:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6A9E15362585B04335C7ED3FFF097ED879F45F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:5f:a9:3c:24:ea:8d:c5:02:87:70:84:21:
0f:01:e5:be:18:0a:36:59:71:0d:cc:f3:5c:bd:01:
75:d1:a8:fb:c4:27:89:10:ce:31:a7:6c:55:e0:19:
89:a0:55:aa:ae:5a:a8:2b:e2:60:cc:00:70:75:41:
46:26:85:85:09:82:12:aa:5b:ed:68:6d:b1:73:87:
9c:ee:ee:19:a0:22:48:f2:88:0c:99:69:f3:8d:45:
24:35:f6:7c:1d:c2:8a:e2:3e:27:45:b9:24:b7:3b:
cb:a2:f7:a3:90:59:1f:b3:f5:74:f4:de:31:38:16:
68:d4:82:4f:3f:d8:ad:86:80:05:a0:8c:16:07:7c:
eb:9b:e4:a3:0a:c3:1d:c4:39:27:f8:d2:33:59:5a:
2c:bd:32:56:59:d0:a5:12:cc:b8:3d:fc:26:c1:e9:
4f:18:3a:56:cf:44:28:19:d6:24:d3:3a:4b:4f:ce:
6f:04:51:85:e9:cb:e7:d8:d9:2e:5d:bd:2f:0f:a7:
b8:84:33:54:ca:29:29:5a:fd:38:f1:5a:21:10:5e:
55:67:26:92:cd:40:d1:fe:02:b7:fb:46:d8:d8:23:
51:9f:aa:cf:cb:49:3f:0e:dd:7e:4b:2d:8b:14:93:
ba:24:c9:d8:fa:2a:7f:97:d7:4c:3c:c6:ea:01:3a:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:15:36:25:85:B0:43:35:C7:ED:3F:FF:09:7E:D8:79:F4:5F:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ap4VNiWFsEM1x-0__wl-2Hn0X3k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:0c:b9:48:62:c2:95:ea:45:e6:6d:23:31:07:a1:8c:5c:6a:
91:24:dc:ef:cb:2f:97:d1:ad:1a:c5:a2:9e:62:0c:af:25:48:
b7:c4:65:bc:18:d9:61:17:2e:2d:ab:f3:bc:f1:00:e3:f8:8a:
9e:03:39:2a:8f:a6:60:5b:e8:b1:e5:82:2b:ea:19:28:72:f7:
71:cf:70:1b:d9:a8:78:f9:31:be:a2:5f:9f:73:b5:6e:a7:fe:
af:1d:2a:c3:57:51:31:9a:19:ed:c2:b6:09:5c:06:ff:20:e6:
12:a6:60:96:5c:38:e6:65:65:64:a4:07:7c:c1:50:b2:a5:67:
c0:6c:02:c1:18:e0:f1:f7:20:9d:96:01:68:de:89:76:71:b0:
54:26:ec:33:fd:32:db:8b:b1:ef:03:e5:a0:1d:c5:5e:3a:80:
f8:b9:11:50:a9:de:a6:e4:37:2a:6a:f0:82:6b:76:3e:69:13:
f3:52:01:78:5e:6b:36:93:1f:2f:d0:8f:0e:ac:c7:1b:2c:af:
b0:ea:aa:26:ea:c1:f8:ca:7b:a2:62:ad:0d:1a:26:b6:1f:ed:
78:6b:ab:c9:7c:7c:4d:f2:1e:97:fd:ee:b3:0b:b2:14:4f:a0:
d6:1a:bd:52:6c:05:f6:de:55:31:f5:2b:11:f2:ec:1b:a0:b8:
83:8e:6b:63
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTkw
MzM2NDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZBOUUxNTM2MjU4NUIw
NDMzNUM3RUQzRkZGMDk3RUQ4NzlGNDVGNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgdl+pPCTqjcUCh3CEIQ8B5b4YCjZZcQ3M81y9AXXRqPvEJ4kQ
zjGnbFXgGYmgVaquWqgr4mDMAHB1QUYmhYUJghKqW+1obbFzh5zu7hmgIkjyiAyZ
afONRSQ19nwdworiPidFuSS3O8ui96OQWR+z9XT03jE4FmjUgk8/2K2GgAWgjBYH
fOub5KMKwx3EOSf40jNZWiy9MlZZ0KUSzLg9/CbB6U8YOlbPRCgZ1iTTOktPzm8E
UYXpy+fY2S5dvS8Pp7iEM1TKKSla/TjxWiEQXlVnJpLNQNH+Arf7RtjYI1Gfqs/L
ST8O3X5LLYsUk7okydj6Kn+X10w8xuoBOrQHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUap4VNiWFsEM1x+0//wl+2Hn0X3kwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9hcDRWTmlXRnNFTTF4LTBf
X3dsLTJIbjBYM2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAKkMuUhiwpXqReZtIzEHoYxcapEk3O/LL5fR
rRrFop5iDK8lSLfEZbwY2WEXLi2r87zxAOP4ip4DOSqPpmBb6LHlgivqGShy93HP
cBvZqHj5Mb6iX59ztW6n/q8dKsNXUTGaGe3CtglcBv8g5hKmYJZcOOZlZWSkB3zB
ULKlZ8BsAsEY4PH3IJ2WAWjeiXZxsFQm7DP9MtuLse8D5aAdxV46gPi5EVCp3qbk
Nypq8IJrdj5pE/NSAXheazaTHy/Qjw6sxxssr7DqqibqwfjKe6JirQ0aJrYf7Xhr
q8l8fE3yHpf97rMLshRPoNYavVJsBfbeVTH1KxHy7BuguIOOa2M=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:46 2025 by rpki-client